CloudMap 漏洞情报库

严重CVE-2024-364122024/06/10

SuiteCRM - SQL Injection

SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6.1, a vulnerability in events response entry point allows for a SQL injection attack. Versions 7.14.4 and 8.6.1 contain a fix for this issue.

suitecrmPoC 已收录RCE

CVSS9.8EPSS 93.2%

高危2023/12/21

SuiteCRM Installer Exposure

SuiteCRM is susceptible to the Installation page exposure due to misconfiguration.

suitecrmPoC 已收录

CVSS—

中危CVE-2023-476432023/11/22

SuiteCRM Unauthenticated Graphql Introspection

Graphql Introspection is enabled without authentication, exposing the scheme defining all object types, arguments, and functions.

suitecrmPoC 已收录

CVSS5.3EPSS 43.2%

suitecrm

关联漏洞

SuiteCRM - SQL Injection

SuiteCRM Installer Exposure

SuiteCRM Unauthenticated Graphql Introspection